Microsoft Patches A Pair of Zero-Days Under Active Attack